$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa File: dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa (raw, json) Hash identifier: WKI4570QnwKq4LqKPaINAG7MpO4r20M2+D6tbw0Vbg4= Subject key identifier: D2:C6:AA:E1:3C:3D:75:4B:F8:6B:A1:C8:FC:63:43:83:FA:41:CD:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAFE81E5341088688CD0C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:3ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:e8:1e:53:41:08:86:88:cd:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=04dba170-005f-43c5-91d9-65c4ac16fc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:74:dd:dd:d3:93:f2:53:4a:98:f3:57:dc:a8: a3:b0:67:52:1e:26:99:89:b1:aa:c4:e8:be:0a:a1: c0:50:0d:fc:0a:57:66:34:05:43:5d:65:b3:d1:ef: e6:de:3c:ef:f7:dc:d3:56:c2:f0:6f:52:b5:01:60: ab:bd:8d:43:aa:cb:73:ab:60:ba:ad:fc:21:e2:74: 30:ba:23:38:87:27:e6:f6:37:e0:f0:16:7a:e6:6d: 7a:f2:4b:bd:47:c6:96:9c:2d:8a:c8:e8:d7:d7:35: 29:d4:bc:7a:cd:8e:bb:7b:d8:12:2d:87:8b:c4:ee: 52:28:97:8f:7a:2d:27:a2:93:09:cf:52:97:3f:d3: 7e:43:13:fc:ec:ea:07:e2:53:e3:dc:01:3e:9b:25: e0:83:42:59:4b:02:27:42:cc:96:7c:97:40:32:fe: 29:42:51:8c:4c:bd:14:c8:54:ad:f0:e4:2e:24:03: 79:e4:5f:61:e2:58:58:3d:6e:7a:e6:7e:bc:a9:e1: 70:01:41:68:a1:95:53:a1:63:7d:db:87:c7:49:9b: ab:29:02:12:0d:53:2c:c6:18:5d:bd:9c:e6:51:a0: aa:96:04:25:9e:88:af:82:d4:eb:9f:f8:c9:b0:e0: 92:ee:df:1d:98:5a:53:a8:20:a8:58:48:ee:15:aa: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:AA:E1:3C:3D:75:4B:F8:6B:A1:C8:FC:63:43:83:FA:41:CD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc3f4626-feac-3bbd-8858-fbc94a70d1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:5a:60:30:80:5e:5d:b3:ee:9c:fb:ea:06:1e:45:25:1c:66: 16:70:01:ba:bc:7e:10:bc:ce:ae:91:e3:af:17:d2:44:7b:7d: c9:fa:b8:20:67:62:8a:41:2b:da:b9:6e:75:1f:9f:ec:8a:20: 62:e8:a2:41:68:1a:92:24:85:26:b4:be:d1:bf:57:c8:ec:df: d9:59:5e:33:e2:89:9e:a7:95:f2:0b:30:a2:13:f2:74:e5:c5: d1:61:55:0b:cb:5b:57:05:72:2a:7f:c8:65:9c:b3:9d:2e:ea: 2e:d4:92:70:aa:8f:49:29:0d:72:e9:a5:4e:04:77:fc:16:7a: ef:be:0a:e6:70:d4:ae:4a:4b:dd:ab:93:17:f1:62:1b:a5:b0: 11:5e:6c:8f:9c:57:8a:00:6c:50:88:0a:c1:3c:81:61:f5:52: 4e:64:50:a6:e1:7b:dc:4f:6d:27:64:23:91:33:e4:51:55:c2: 22:07:3f:63:42:15:e4:74:c0:5e:d2:f6:26:40:b1:02:91:0c: 76:89:b3:98:db:71:4f:9f:9a:78:89:32:77:3b:c0:46:85:44: e6:9d:17:d5:1e:1a:b0:da:d1:d8:d2:38:97:a0:5d:05:9a:de: d4:52:0a:cd:64:a6:00:35:63:f7:87:df:98:53:c9:4d:a5:bc: 1d:35:20:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr+geU0EIhojNDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MDRkYmExNzAtMDA1Zi00M2M1LTkxZDktNjVjNGFjMTZmYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXTd3dOT8lNKmPNX3KijsGdSHiaZibGqxOi+ CqHAUA38CldmNAVDXWWz0e/m3jzv99zTVsLwb1K1AWCrvY1Dqstzq2C6rfwh4nQw uiM4hyfm9jfg8BZ65m168ku9R8aWnC2KyOjX1zUp1Lx6zY67e9gSLYeLxO5SKJeP ei0nopMJz1KXP9N+QxP87OoH4lPj3AE+myXgg0JZSwInQsyWfJdAMv4pQlGMTL0U yFSt8OQuJAN55F9h4lhYPW565n68qeFwAUFooZVToWN924fHSZurKQISDVMsxhhd vZzmUaCqlgQlnoivgtTrn/jJsOCS7t8dmFpTqCCoWEjuFapcwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNLGquE8PXVL+GuhyPxjQ4P6Qc0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMzZjQ2MjYtZmVhYy0z YmJkLTg4NTgtZmJjOTRhNzBkMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQPv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANRaYDCAXl2z7pz76gYeRSUcZhZwAbq8fhC8zq6R468X0kR7fcn6 uCBnYopBK9q5bnUfn+yKIGLookFoGpIkhSa0vtG/V8js39lZXjPiiZ6nlfILMKIT 8nTlxdFhVQvLW1cFcip/yGWcs50u6i7UknCqj0kpDXLppU4Ed/wWeu++CuZw1K5K S92rkxfxYhulsBFebI+cV4oAbFCICsE8gWH1Uk5kUKbhe9xPbSdkI5Ez5FFVwiIH P2NCFeR0wF7S9iZAsQKRDHaJs5jbcU+fmniJMnc7wEaFROadF9UeGrDa0djSOJeg XQWa3tRSCs1kpgA1Y/eH35hTyU2lvB01IGQ= -----END CERTIFICATE-----Generated at Sun May 5 02:22:57 2024 by rpki-client on console-ams.rpki-client.org